| Local Model Poisoning Attacks to Byzantine-Robust Federated Learning M Fang, X Cao, J Jia, NZ Gong USENIX Security Symposium, 2020 | 1402 | 2020 |
| MemGuard: Defending against Black-Box Membership Inference Attacks via Adversarial Examples J Jia, A Salem, M Backes, Y Zhang, NZ Gong ACM Conference on Computer and Communications Security (CCS), 2019 | 465 | 2019 |
| FLDetector: Defending Federated Learning Against Model Poisoning Attacks via Detecting Malicious Clients Z Zhang, X Cao, J Jia, NZ Gong ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD), 2022 | 256 | 2022 |
| Backdoor attacks to graph neural networks Z Zhang, J Jia, B Wang, NZ Gong ACM Symposium on Access Control Models and Technologies (SACMAT), 2021 | 248 | 2021 |
| AttriGuard: A Practical Defense Against Attribute Inference Attacks via Adversarial Machine Learning J Jia, NZ Gong USENIX Security Symposium, 2018 | 215 | 2018 |
| BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning J Jia, Y Liu, NZ Gong IEEE Symposium on Security and Privacy (IEEE S&P), 2022 | 202 | 2022 |
| Stealing Links from Graph Neural Networks X He, J Jia, M Backes, NZ Gong, Y Zhang USENIX Security Symposium, 2021 | 196 | 2021 |
| IPGuard: Protecting the Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary X Cao, J Jia, NZ Gong ACM ASIA Conference on Computer and Communications Security (ASIACCS), 2021 | 168 | 2021 |
| Provably Secure Federated Learning against Malicious Clients X Cao, J Jia, NZ Gong AAAI Conference on Artificial Intelligence (AAAI), 2021 | 161 | 2021 |
| Random walk based fake account detection in online social networks J Jia, B Wang, NZ Gong IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), 2017 | 153 | 2017 |
| Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks J Jia, X Cao, NZ Gong AAAI Conference on Artificial Intelligence (AAAI), 2021 | 125 | 2021 |
| On Certifying Robustness against Backdoor Attacks via Randomized Smoothing B Wang, X Cao, J Jia, NZ Gong CVPR 2020 Workshop on Adversarial Machine Learning in Computer Vision, 2020 | 120 | 2020 |
| AttriInfer: Inferring user attributes in online social networks using markov random fields J Jia, B Wang, L Zhang, NZ Gong Proceedings of the WWW, 1561-1569, 2017 | 114 | 2017 |
| Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothing J Jia, X Cao, B Wang, NZ Gong International Conference on Learning Representations (ICLR), 2020 | 104 | 2020 |
| EncoderMI: Membership Inference against Pre-trained Encoders in Contrastive Learning H Liu, J Jia, W Qu, NZ Gong ACM Conference on Computer and Communications Security (CCS), 2021 | 102 | 2021 |
| SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding Z Xu, F Jiang, L Niu, J Jia, BY Lin, R Poovendran Annual Meeting of the Association for Computational Linguistics (ACL), 2024 | 95 | 2024 |
| Data Poisoning Attacks to Local Differential Privacy Protocols X Cao, J Jia, NZ Gong USENIX Security Symposium, 2021 | 95 | 2021 |
| PointGuard: Provably Robust 3D Point Cloud Classification H Liu, J Jia, NZ Gong IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR), 2021 | 94 | 2021 |
| Certified Robustness of Community Detection against Adversarial Structural Perturbation via Randomized Smoothing J Jia, B Wang, X Cao, NZ Gong The Web Conference (WWW), 2020 | 92 | 2020 |
| FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Information X Cao, J Jia, Z Zhang, NZ Gong IEEE Symposium on Security and Privacy (IEEE S&P), 2023 | 88 | 2023 |